Google Patches Critical Remote Code Execution Bugs in Android OS

Google issued 44 patches for its Android operating system as part of its July Security Bulletin this week. Of those vulnerabilities, 11 were rated critical and the remainder were rated high in severity. The vulnerabilities varied from OS framework to Media framework bugs, including system and...

CVE-2018-5835

If the seqlen is greater then CSRMAXRSCLEN, a buffer overflow in wlanhddcfg80211addkey may occur when copying keyRSC in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...

Buffer overflow

In wlanhddcfg80211vendorscan, a buffer overwrite can potentially occur in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...

CVE-2018-5834

In wlanhddcfg80211vendorscan, a buffer overwrite can potentially occur in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...

CVE-2018-5834

CVE-2018-5834 affects Android CAF WLAN components (Android for MSM, Firefox OS for MSM, QRD Android) via a buffer overwrite in the kernel interface path __wlan_hdd_cfg80211_vendor_scan(). The issue is described as a potential buffer overwrite in CAF Android releases before the 2018-06-05 patch le...

PT-2018-17173

Name of the Vulnerable Software and Affected Versions: Android versions prior to security patch level 2018-06-05 Description: A buffer overwrite can potentially occur in the wlan hdd cfg80211 vendor scan function. This issue affects Android releases from CAF using the linux kernel. Recommendation...

PT-2018-17174

Name of the Vulnerable Software and Affected Versions: Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05 Description: A buffer overflow may occur in the wlan hdd cfg80211 add key function when copying keyRSC if...

PT-2018-17169

Name of the Vulnerable Software and Affected Versions: Android versions prior to security patch level 2018-06-05 Description: A buffer over-read can potentially occur in the wlan hdd cfg80211 set privacy ibss function. Recommendations: For Android versions prior to security patch level 2018-06-05...

PT-2018-17197

Name of the Vulnerable Software and Affected Versions: Android versions prior to security patch level 2018-07-05 Description: A buffer overwrite can potentially occur in the wlan hdd cfg80211 vendor scan function when SCAN SSIDS and QCA WLAN VENDOR ATTR SCAN FREQUENCIES are parsed. This issue...

Google Android Qualcomm component remote code execution vulnerability (CNVD-2018-14274)

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, of which Qualcomm WLAN is a wireless LAN component. A remote code execution vulnerability exists in Qualcomm WLAN in versions of Android prior to 2018-07-05. A remote attacker could explo...

Microsoft Windows 10: Automatically connect to suggested open hotspots

This policy setting determines whether users can enable the following WLAN settings: SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows: Configuration of wireless settings using Windows Connect Now

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winconnectnow.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Configuration of wireless settings using Windows Connect Now Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

PT-2018-17198

Name of the Vulnerable Software and Affected Versions: Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description: A buffer overflow issue occurs when userspace provides a too-large WPA RSN IE length i...

CVE-2018-8209

An information disclosure vulnerability exists when Windows allows a normal user to access the Wireless LAN profile of an administrative user, aka "Windows Wireless Network Profile Information Disclosure Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...

Google Android Qualcomm WLAN Heap Override Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA, with Qualcomm WLAN being one of the components used. Qualcomm WLAN is a wireless LAN component developed by Qualco...

CVE-2018-3581

In the WLAN driver in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel, a buffer overwrite can occur if the vdevid received from firmware is larger than maxbssid...

Buffer overflow

In the WLAN driver in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel, event-numentriesinpage is a value received from firmware that is not properly validated which can lead to a buffer over-read...

Buffer overflow

In the WLAN driver in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel, a buffer overwrite can occur if the vdevid received from firmware is larger than maxbssid...

Design/Logic Flaw

An arbitrary address write can occur if a compromised WLAN firmware sends incorrect data to WLAN driver in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel...

CVE-2018-3579

In the WLAN driver in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel, event-numentriesinpage is a value received from firmware that is not properly validated which can lead to a buffer over-read...